$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft File: CC9F42C3A1E6623612312417013AA12DC19734C3.mft (raw, json) Hash identifier: xKfoZ6mP4wpGCbXfTIuIXuqEaHaw+0+nuoEUwrr7GpU= Subject key identifier: 2E:2E:1F:99:51:4E:5C:6E:5B:25:4D:F3:D3:03:F3:A5:7B:99:67:D8 Authority key identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3 Certificate issuer: /CN=CC9F42C3A1E6623612312417013AA12DC19734C3 Certificate serial: 4FAD2757CB0E4B4CE669D3F2AF87DC59F835E081 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft Manifest number: F7 Signing time: Wed 05 Nov 2025 19:01:27 +0000 Manifest this update: Wed 05 Nov 2025 18:56:27 +0000 Manifest next update: Thu 06 Nov 2025 21:55:27 +0000 Files and hashes: 1: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: GFslzGMs5oIwXSuzFgkW9lwIslCumt75u502gJdO0cM=) 2: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: REH6hncucQPixihQMSIQOS/b1bX4EMEcVsaPP3LjZxA=) 3: CC9F42C3A1E6623612312417013AA12DC19734C3.crl (hash: li3BGUQwZ54aCE+jvZ9GX5kHH9R/L8Y/KtzAjeBpJuk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ad:27:57:cb:0e:4b:4c:e6:69:d3:f2:af:87:dc:59:f8:35:e0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC9F42C3A1E6623612312417013AA12DC19734C3 Validity Not Before: Nov 5 18:56:27 2025 GMT Not After : Nov 6 21:55:27 2025 GMT Subject: CN=2E2E1F99514E5C6E5B254DF3D303F3A57B9967D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:11:60:57:b1:eb:23:08:4a:ef:1a:5d:b7: 77:46:5c:a4:48:5c:97:8f:ed:14:d9:c1:89:fb:11: 64:ca:1a:36:d0:75:80:60:ec:55:89:b5:f4:7c:cf: 4d:13:d2:26:44:34:5f:ea:82:22:f8:db:c8:8c:35: 8b:2d:ce:38:b0:e0:d0:17:09:fc:91:9c:3e:63:88: be:a6:91:7a:6c:63:ef:00:e7:8a:13:ee:93:6f:5b: b0:0e:cf:e7:7b:62:55:2e:0e:77:8b:b9:67:54:34: 57:2d:26:63:73:6d:3f:c1:9e:21:f4:ed:4d:f4:62: 12:63:17:7b:8f:95:40:1a:2f:8f:c1:9d:98:e2:70: 9f:12:5b:fa:00:88:77:80:d6:fc:4a:4d:a4:09:cb: 19:13:9f:da:45:16:3d:98:9e:bb:be:43:51:59:75: b2:90:a3:62:b5:36:e3:cd:41:9b:cd:f0:1a:82:a8: 35:91:0a:81:1f:e9:13:c8:24:79:71:5c:76:c4:73: 06:2a:1f:1c:47:73:eb:e7:77:c4:8b:86:c6:24:7e: 72:b8:56:2a:a2:66:d1:74:f3:00:22:dd:79:29:21: fa:4e:6d:0e:3f:9c:7e:77:d3:24:3b:ab:68:fd:88: 56:47:5a:18:13:3a:9b:10:9f:87:f0:b8:5d:c9:7b: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2E:1F:99:51:4E:5C:6E:5B:25:4D:F3:D3:03:F3:A5:7B:99:67:D8 X509v3 Authority Key Identifier: keyid:CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:29:43:59:67:c2:2c:d9:99:d9:a0:4a:75:ca:a2:71:d6:59: a1:f3:6e:3d:a8:32:fd:3e:b8:a8:dc:63:0d:a0:ff:43:76:b4: 4b:07:27:17:10:4a:0e:5d:08:63:4e:51:6a:9f:68:d4:61:1f: 5b:12:fe:c5:4b:6b:e2:a1:94:bd:ba:fe:b0:fd:74:e9:24:be: 46:47:4c:78:9b:bb:48:00:c7:f9:26:b4:f4:94:77:67:f4:4d: c4:32:56:38:e8:74:44:eb:3e:7f:35:cd:25:f5:20:10:ab:d6: fb:ee:3b:ea:3e:87:73:be:bb:48:2d:49:50:25:78:c2:21:08: fc:c9:7c:ed:70:5e:a2:1b:71:bc:1d:21:d0:15:b1:c5:ba:d9: bd:eb:42:09:dc:f4:3a:86:41:ac:3e:99:46:cc:37:e8:0e:ad: b0:5e:9d:2a:ae:43:14:a2:06:ac:c1:69:73:c5:5a:bf:b1:0e: 55:c1:b6:61:ab:b2:7f:33:f0:aa:0c:7d:78:6c:d6:4e:72:40: 31:c9:ea:1f:63:b5:98:80:1a:eb:fc:91:e3:26:92:46:15:af: 80:f5:28:7f:9d:22:f6:d6:69:ee:49:c0:29:82:dd:dc:75:b9: cb:00:65:02:0b:e9:e2:d9:58:7b:5f:34:e6:e6:3f:88:16:03: dd:3e:3f:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT60nV8sOS0zmadPyr4fcWfg14IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M5RjQyQzNBMUU2NjIzNjEyMzEyNDE3MDEzQUExMkRD MTk3MzRDMzAeFw0yNTExMDUxODU2MjdaFw0yNTExMDYyMTU1MjdaMDMxMTAvBgNV BAMTKDJFMkUxRjk5NTE0RTVDNkU1QjI1NERGM0QzMDNGM0E1N0I5OTY3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42xFgV7HrIwhK7xpdt3dGXKRI XJeP7RTZwYn7EWTKGjbQdYBg7FWJtfR8z00T0iZENF/qgiL428iMNYstzjiw4NAX CfyRnD5jiL6mkXpsY+8A54oT7pNvW7AOz+d7YlUuDneLuWdUNFctJmNzbT/BniH0 7U30YhJjF3uPlUAaL4/BnZjicJ8SW/oAiHeA1vxKTaQJyxkTn9pFFj2Ynru+Q1FZ dbKQo2K1NuPNQZvN8BqCqDWRCoEf6RPIJHlxXHbEcwYqHxxHc+vnd8SLhsYkfnK4 ViqiZtF08wAi3XkpIfpObQ4/nH530yQ7q2j9iFZHWhgTOpsQn4fwuF3Je/oPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULi4fmVFOXG5bJU3z0wPzpXuZZ9gwHwYDVR0j BBgwFoAUzJ9Cw6HmYjYSMSQXATqhLcGXNMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hk b3gvMC9DQzlGNDJDM0ExRTY2MjM2MTIzMTI0MTcwMTNBQTEyREMxOTczNEMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOUY0MkMzQTFFNjYyMzYx MjMxMjQxNzAxM0FBMTJEQzE5NzM0QzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hkb3gvMC9D QzlGNDJDM0ExRTY2MjM2MTIzMTI0MTcwMTNBQTEyREMxOTczNEMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmClDWWfCLNmZ2aBKdcqicdZZofNuPagy/T64qNxjDaD/Q3a0SwcnFxBKDl0I Y05Rap9o1GEfWxL+xUtr4qGUvbr+sP106SS+RkdMeJu7SADH+Sa09JR3Z/RNxDJW OOh0ROs+fzXNJfUgEKvW++476j6Hc767SC1JUCV4wiEI/Ml87XBeohtxvB0h0BWx xbrZvetCCdz0OoZBrD6ZRsw36A6tsF6dKq5DFKIGrMFpc8Vav7EOVcG2YauyfzPw qgx9eGzWTnJAMcnqH2O1mIAa6/yR4yaSRhWvgPUof50i9tZp7knAKYLd3HW5ywBl Agvp4tlYe1805uY/iBYD3T4/Kw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:34 2025 by rpki-client